CVE-2021-27653

概要

参考情報

• collaborate.pega.com/discussion/pega-security-advisory-%E2%80%93-b21 · Vendor Advisory
• robertwillishacking.com/census-vulnerability-exposes-10k-oauth-tokens-thousands-of-user-records · Exploit

infinity のその他の脆弱性

• CVE-2024-10716中 4.8Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.
• CVE-2024-10094緊急 9.8Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code
• CVE-2024-6702中 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.
• CVE-2024-6701中 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.
• CVE-2024-6700中 4.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.